@semiont/core 0.5.29 → 0.5.30

package/dist/index.d.ts

@@ -1588,7 +1588,7 @@ interface components {
                 domain: string;
                 isAdmin: boolean;
             };
-            /** @description Short-lived access token (1 hour). Use as Authorization: Bearer header on API calls. */
+            /** @description Short-lived access token. Use as Authorization: Bearer header on API calls. The TTL is deliberately NOT restated here — docs/system/administration/AUTHENTICATION.md holds the one table of token lifetimes, and a second copy is how this description came to claim an hour for a ten-minute token. A client must refresh from the refresh token rather than assume any particular window. */
             token: string;
             /** @description Long-lived refresh token (30 days). Exchange via POST /api/tokens/refresh for a fresh access token. */
             refreshToken: string;
@@ -1909,6 +1909,8 @@ interface components {
             };
             /** @description Optional resource scope for broadcast channels (e.g. resourceId). Publishers only — clients must never set this. */
             scope?: string;
+            /** @description Routing address for this request's reply (CORRELATED-REPLY-ROUTING D1/D2): the emit doubles as a claim on the correlationId, and delivery matches BOTH this and the emitting principal. Top-level, not inside `payload` — a wire concern like `scope`, so it never enters a channel's domain type. Optional in the schema because a plain broadcast needs no return address; the route requires it when the channel is a registered request channel and the payload carries a correlationId. */
+            clientId?: string;
         };
         /** @description Subscription matrix for the bus SSE stream (MULTI-RESOURCE-SCOPE). `global` channels are delivered unscoped; each `scoped` entry subscribes the connection to one resource scope's channels, optionally resuming replay from that scope's last-seen persisted event id. At least one global channel or one scoped entry is required. */
         BusSubscribeRequest: {
@@ -1925,6 +1927,8 @@ interface components {
                 /** @description This scope's last-seen persisted event id (`p-<scope>-<seq>`). The server replays this scope's persisted events after it before joining the live tail, and emits a scoped `bus:resume-gap` when it cannot cover the gap (unparseable or mismatched id, retention exceeded, or query error). */
                 lastEventId?: string;
             }[];
+            /** @description Routing address for correlated replies (CORRELATED-REPLY-ROUTING D1): a UUID minted once per bus-client lifetime — per actor, NOT per connection, so it survives a make-before-break reconnect and both overlap connections share it. Required: a subscriber without one could never receive a correlated frame, and that must fail loudly here rather than silently at delivery. Not authentication — the JWT stays that; this is an unguessable routing address, never echoed into any payload or broadcast frame. */
+            clientId: string;
         };
         CloneResourceWithTokenResponse: {
             /** @description Generated clone token */
@@ -2239,6 +2243,8 @@ interface components {
         };
         /** @description Progress payload emitted on the gather:annotation-progress SSE channel during LLM context gathering. */
         GatherProgress: {
+            /** @description The request this progress belongs to (CORRELATED-REPLY-ROUTING D3). Required: `CORRELATED_CHANNELS` derives every operation's progress channel into the delivery filter, so a frame without it cannot be matched to a claim and is silently dropped. */
+            correlationId: string;
             message?: string;
             percentage?: number;
         };
@@ -2497,12 +2503,29 @@ interface components {
             assessmentsFound: number;
             assessmentsCreated: number;
         };
-        /** @description Request to cancel a job */
+        /** @description Request to cancel a job. Target one running or pending job by `jobId` (JOB-RESTART-SAFETY P4), or a whole category of pending jobs by `jobType`. A `jobId`-targeted request that names a RUNNING job is honoured cooperatively by the owning worker, which stops at its next unit boundary and emits JobCancelCommand — the queue is never made to yank a running job out from under a live worker. */
         JobCancelRequest: {
             /** @description Correlation id for request/reply matching, set by the SDK's busRequest so the confirmed-write ack/failure routes back. Absent for the local cancelRequest UI signal. */
             correlationId?: string;
-            /** @enum {string} */
-            jobType: "annotation" | "generation";
+            /** @description Cancel this one job. A pending job is cancelled immediately by the gateway; a running job is cancelled cooperatively by its worker. Takes precedence over jobType. */
+            jobId?: string;
+            /**
+             * @description Cancel all PENDING jobs in this category — the bulk UI signal. Ignored when jobId is present.
+             * @enum {string}
+             */
+            jobType?: "annotation" | "generation";
+        };
+        /** @description A worker's confirmation that it has cooperatively stopped a running job at a unit boundary (JOB-RESTART-SAFETY P4) — the queue moves the job to cancelled/. Distinct from JobCancelRequest (the client→worker REQUEST to stop): this is the worker announcing it did, so the running job is never yanked to cancelled/ out from under a live worker (the roach-motel race). */
+        JobCancelCommand: {
+            /** @description Authenticated user's DID, injected by the /bus/emit gateway. Clients do not set this. */
+            _userId?: string;
+            resourceId: string;
+            jobId: string;
+            jobType: components["schemas"]["JobType"];
+            /** @description Annotation this job is attached to, when applicable. Lets the UI route cancellation feedback to a specific annotation. */
+            annotationId?: string;
+            /** @description Entity-type units whose annotations were fully emitted before cancellation. Recorded on the cancelled job's metadata so the work already done stays visible. */
+            completedUnits?: string[];
         };
         /** @description Command to claim a pending job (atomic CAS: pending → running) */
         JobClaimCommand: {
@@ -2577,6 +2600,23 @@ interface components {
             /** @description Annotation this job is attached to, when applicable. Lets the UI route failure feedback (error toast, revert state) to a specific annotation. */
             annotationId?: string;
             error: string;
+            /** @description Entity-type units whose annotations were fully emitted before this failure (checkpointed resume). The queue records them on the retried job's metadata; a retried claim skips them so completed work is neither redone nor duplicated. */
+            completedUnits?: string[];
+            /**
+             * @description Worker-side classification of the failure, made where the error is still typed. 'deterministic' — the same request cannot succeed on a second attempt — skips the retry budget; absent or 'transient' retries as before. Only KNOWN-deterministic failures carry the class.
+             * @enum {string}
+             */
+            failureClass?: "transient" | "deterministic";
+            /** @description Whether the queue will re-queue this job for another attempt. Computed by the worker from the SAME predicate the queue applies at failJob (one decision site, `willRetryAfter` in @semiont/jobs) using the retry budget carried on the claimed record. FALSE (or absent) means this failure is TERMINAL: a client's job-watch stream ends here. TRUE means the work continues on a fresh attempt — the failure is an event, not the end, and a stream that terminated on it would report a recovering run as a failed one (JOB-RESTART-SAFETY P5). */
+            willRetry?: boolean;
+        };
+        /** @description Command to persist a running job's completed-unit checkpoint AT unit completion (JOB-RESTART-SAFETY P2). Distinct from JobFailCommand's checkpoint, which lands only on a clean failure: a worker that dies (crash/OOM/kill) never emits job:fail, so this durable, unthrottled write is what lets the janitor's stale-running recovery resume a dead worker's job rather than redo its finished units. */
+        JobCheckpointCommand: {
+            /** @description Authenticated user's DID, injected by the /bus/emit gateway. Clients do not set this. */
+            _userId?: string;
+            jobId: string;
+            /** @description Entity-type units whose annotations have been fully emitted so far. Unioned into the running job's metadata checkpoint; a retry after recovery skips them. */
+            completedUnits: string[];
         };
         /** @description Result of a job that completed without doing its work because the resource could not be read. Distinct from a failure: nothing went wrong, there was simply no text to work with — an encrypted or damaged PDF, a scan whose text could not be recognized, or a document that yielded nothing. The reasons are the extraction vocabulary the Smelter reports on `smelt:settled`, MINUS `no-extractor`: a media type that can never yield text (a zip, an image) is a bad request rather than a decline, so a worker asked to detect over one throws and the job reports `job:fail`. Everything here is a resource-specific outcome — the same media type would have succeeded on a different document. */
         JobDeclinedResult: {
@@ -2661,6 +2701,8 @@ interface components {
                 value: string;
                 /** @description Annotations found for it. */
                 foundCount: number;
+                /** @description Annotations actually persisted for it — post-dedupe and post-durability-acknowledgement, so it counts what the event log holds, not what the model proposed. Beside foundCount this is the per-unit yield the sizing work is judged by. Present on flows whose units persist as they complete (reference-annotation); the tagging flow reports the same fact as byCategory on its result, because its annotations are built after the per-category loop. */
+                persistedCount?: number;
             }[];
             /** @description Echoed job parameters for display in the progress UI. `label` is a CODE, not a sentence — the client owns the wording, same rule as the progress message. `value` is the user's own input (an entity-type list, their instructions) and is deliberately NOT translated: it is their words, not ours. */
             requestParams?: {
@@ -2939,6 +2981,29 @@ interface components {
                 annotationId: string;
             };
         };
+        /** @description Bus command to persist a detection unit's annotations as one acknowledged batch (JOB-RESTART-SAFETY P6). Unlike mark:create, which is fire-and-forget and resolves when the bus accepts it, this command is answered only after every annotation is in the event log — so a worker can gate unit completion on durability rather than on emission. The batch is the unit: a partial commit is reported as a failure, and the worker retries the whole unit, which is safe because annotation ids are deterministic (P3). */
+        MarkCommitCommand: {
+            /** @description Authenticated user's DID, injected by the /bus/emit gateway. Clients do not set this. */
+            _userId?: string;
+            /** @description Correlation id set by busRequest so the mark:commit-ok / mark:commit-failed reply routes back to the awaiting worker. */
+            correlationId: string;
+            /** @description Resource every annotation in this batch targets. */
+            resourceId: string;
+            /** @description The unit's annotations, already built with deterministic ids. Re-committing an identical batch is a no-op rather than a duplicate. */
+            annotations: components["schemas"]["Annotation"][];
+        };
+        /** @description Durability acknowledgement for a mark:commit batch: every annotation named by the command is in the event log at the moment this is emitted. */
+        MarkCommitOk: {
+            /** @description Correlation id echoed from the mark:commit command so busRequest can match the reply. */
+            correlationId: string;
+            /** @description What the commit persisted. */
+            response: {
+                /** @description Annotations this commit appended to the event log. Equals the batch size on success — a retry re-appends what already landed rather than counting it out, because the annotation fold is idempotent by id and the log is append-only. Not a dedupe count. */
+                persisted: number;
+                /** @description Ids the batch covers, whether appended now or already present. */
+                annotationIds: string[];
+            };
+        };
         /** @description Raw annotation creation intent — bus handler assembles the W3C annotation */
         MarkCreateRequest: {
             correlationId: string;
@@ -4049,6 +4114,16 @@ type EventMap = {
     'mark:update-entity-types': components['schemas']['MarkUpdateEntityTypesCommand'];
     'mark:create-ok': components['schemas']['MarkCreateOk'];
     'mark:create-failed': components['schemas']['CommandError'];
+    /**
+     * Persist a detection unit's annotations as ONE acknowledged batch
+     * (JOB-RESTART-SAFETY P6). Answered only after every annotation is in
+     * the event log, so a worker can gate unit completion on durability
+     * instead of on emission — which is what makes an Archivist outage a
+     * delay rather than silent data loss.
+     */
+    'mark:commit': components['schemas']['MarkCommitCommand'];
+    'mark:commit-ok': components['schemas']['MarkCommitOk'];
+    'mark:commit-failed': components['schemas']['CommandError'];
     'mark:delete-ok': components['schemas']['MarkDeleteOk'];
     'mark:delete-failed': components['schemas']['CommandError'];
     'mark:archive-ok': {
@@ -4262,8 +4337,10 @@ type EventMap = {
     'job:report-progress': components['schemas']['JobReportProgressCommand'];
     'job:complete': components['schemas']['JobCompleteCommand'];
     'job:fail': components['schemas']['JobFailCommand'];
+    'job:checkpoint': components['schemas']['JobCheckpointCommand'];
     'job:queued': components['schemas']['JobQueuedEvent'];
     'job:cancel-requested': components['schemas']['JobCancelRequest'];
+    'job:cancel': components['schemas']['JobCancelCommand'];
     'job:status-requested': components['schemas']['JobStatusRequest'];
     'job:create': components['schemas']['JobCreateCommand'];
     'job:claim': components['schemas']['JobClaimCommand'];
@@ -4463,6 +4540,9 @@ declare const CHANNEL_SCHEMAS: {
     readonly 'frame:add-tag-schema': "FrameAddTagSchemaCommand";
     readonly 'mark:create-ok': "MarkCreateOk";
     readonly 'mark:create-failed': "CommandError";
+    readonly 'mark:commit': "MarkCommitCommand";
+    readonly 'mark:commit-ok': "MarkCommitOk";
+    readonly 'mark:commit-failed': "CommandError";
     readonly 'mark:delete-ok': "MarkDeleteOk";
     readonly 'mark:delete-failed': "CommandError";
     readonly 'mark:archive-ok': null;
@@ -4571,8 +4651,10 @@ declare const CHANNEL_SCHEMAS: {
     readonly 'job:report-progress': "JobReportProgressCommand";
     readonly 'job:complete': "JobCompleteCommand";
     readonly 'job:fail': "JobFailCommand";
+    readonly 'job:checkpoint': "JobCheckpointCommand";
     readonly 'job:queued': "JobQueuedEvent";
     readonly 'job:cancel-requested': "JobCancelRequest";
+    readonly 'job:cancel': "JobCancelCommand";
     readonly 'job:status-requested': "JobStatusRequest";
     readonly 'job:create': "JobCreateCommand";
     readonly 'job:claim': "JobClaimCommand";
@@ -5639,21 +5721,28 @@ declare class ConflictError extends SemiontError {
 type Agent$1 = components['schemas']['Agent'];
 type GetResourceResponse = components['schemas']['GetResourceResponse'];
 /**
- * Six-state lifecycle for a transport's connection. Drives UI affordances
+ * Seven-state lifecycle for a transport's connection. Drives UI affordances
  * (connecting spinners, reconnecting banners, etc.) and is observed via
  * `ITransport.state$`.
  *
- *   initial      ─ pre-`start()`; never enters subscribers' streams
- *                  except as the first replayed value
- *   connecting   ─ in-flight initial open
- *   open         ─ healthy, delivering events
- *   reconnecting ─ open → dropped, retrying; may be transient
- *   degraded     ─ has been reconnecting for > DEGRADED_THRESHOLD_MS;
- *                  UI banner threshold; distinguishes brief mount-
- *                  churn cycles from sustained disconnection
- *   closed       ─ stop()/dispose() called; terminal
- */
-type ConnectionState = 'initial' | 'connecting' | 'open' | 'reconnecting' | 'degraded' | 'closed';
+ *   initial         ─ pre-`start()`; never enters subscribers' streams
+ *                     except as the first replayed value
+ *   connecting      ─ in-flight initial open
+ *   open            ─ healthy, delivering events
+ *   reconnecting    ─ open → dropped, retrying; may be transient
+ *   degraded        ─ has been reconnecting for > DEGRADED_THRESHOLD_MS;
+ *                     UI banner threshold; distinguishes brief mount-
+ *                     churn cycles from sustained disconnection
+ *   unauthenticated ─ not attempting: the credential is absent, or was
+ *                     refused (401) and only a DIFFERENT one is worth
+ *                     trying. No network activity; recovers on its own
+ *                     when a usable credential appears (a re-login, a
+ *                     session refresh). The refusal itself surfaces on
+ *                     the transport's error stream (SSE-AUTH-RESILIENCE
+ *                     D3/D6a — one state for both answers)
+ *   closed          ─ stop()/dispose() called; terminal
+ */
+type ConnectionState = 'initial' | 'connecting' | 'open' | 'reconnecting' | 'degraded' | 'unauthenticated' | 'closed';
 type AuthResponse = components['schemas']['AuthResponse'];
 type TokenRefreshResponse = components['schemas']['TokenRefreshResponse'];
 type AdminUserStatsResponse = components['schemas']['AdminUserStatsResponse'];
@@ -6016,6 +6105,10 @@ declare const BUS_OPERATIONS: {
         readonly result: "mark:create-ok";
         readonly failure: "mark:create-failed";
     };
+    readonly 'mark:commit': {
+        readonly result: "mark:commit-ok";
+        readonly failure: "mark:commit-failed";
+    };
     readonly 'mark:delete': {
         readonly result: "mark:delete-ok";
         readonly failure: "mark:delete-failed";
@@ -6100,7 +6193,7 @@ type BusOperationKey = keyof typeof BUS_OPERATIONS;
  * and SSE infrastructure. A reply channel must NOT go here — declare its
  * operation in `BUS_OPERATIONS` instead.
  */
-declare const BRIDGED_BROADCASTS: readonly ["job:report-progress", "job:complete", "job:fail", "frame:entity-type-added", "frame:tag-schema-added", "beckon:focus", "beckon:sparkle", "bus:resume-gap", "browse:resource-open", "browse:resource-viewed", "session:joined", "session:left", "browse:click"];
+declare const BRIDGED_BROADCASTS: readonly ["job:report-progress", "job:complete", "job:fail", "frame:entity-type-added", "frame:tag-schema-added", "yield:created", "yield:updated", "yield:cloned", "yield:moved", "beckon:focus", "beckon:sparkle", "bus:resume-gap", "browse:resource-open", "browse:resource-viewed", "session:joined", "session:left", "browse:click"];
 type OpSpecs = (typeof BUS_OPERATIONS)[keyof typeof BUS_OPERATIONS];
 type ProgressChannel<O> = O extends {
     progress: infer P extends EventName;
@@ -6125,11 +6218,24 @@ type BridgedChannel = RegistryReply | (typeof BRIDGED_BROADCASTS)[number];
 type BusReply<Op extends BusOperationKey> = EventMap[(typeof BUS_OPERATIONS)[Op]['result'] & EventName] extends {
     response: infer R;
 } ? R : void;
-type BusRequestErrorCode = 'bus.timeout' | 'bus.rejected' | 'bus.closed' | 'bus.bad-payload' | 'bus.unauthorized' | 'bus.forbidden' | 'bus.not-found';
+type BusRequestErrorCode = 'bus.timeout' | 'bus.rejected' | 'bus.closed' | 'bus.bad-payload' | 'bus.unauthorized' | 'bus.forbidden' | 'bus.not-found' | 'bus.unsubscribed';
 declare class BusRequestError extends SemiontError {
     code: BusRequestErrorCode;
     constructor(message: string, code: BusRequestErrorCode, details?: Record<string, unknown>);
 }
+/**
+ * The reply channels — result, failure, and (for streaming operations)
+ * progress — of every operation in `channels`, deduplicated. Entries that
+ * are not operation request channels (broadcast signals, domain events)
+ * contribute nothing.
+ *
+ * This is THE derivation for a narrowed-subscription transport profile
+ * (`HttpTransportConfig.channels`: subscribe exactly the reply channels of
+ * the operations a process awaits) and for a service's outbound reply pump
+ * (forward exactly the replies of the operations it answers). Restating a
+ * reply channel by hand was the recurring unbridged-reply bug class.
+ */
+declare function replyChannelsFor(channels: readonly string[]): EventName[];
 /**
  * Subset of ITransport that `busRequest` needs: a way to send a command and
  * a way to observe channels. Generic enough that an in-process transport
@@ -6163,6 +6269,16 @@ interface BusRequestPrimitive {
      * lose replies omits the surface and `busRequest` behaves as before.
      */
     trackReply?(correlationId: string): () => void;
+    /**
+     * Whether this transport's receive path delivers `channel` — i.e. a reply
+     * published there can actually reach this process. Wire transports whose
+     * subscription set is configurable (a worker subscribing only the reply
+     * channels it awaits) implement this so `busRequest` on a channel outside
+     * the set fails fast with `bus.unsubscribed` instead of burning its
+     * timeout on a reply that could never arrive. OPTIONAL: an in-process
+     * transport delivers every channel and omits it.
+     */
+    isSubscribed?(channel: string): boolean;
 }
 /**
  * Request/reply over the bus, keyed by the operation's request channel.
@@ -7994,5 +8110,5 @@ declare function getShardPath(key: string, numBuckets?: number): [string, string
  */
 declare const DISCOVERY_URL_PATH = "/discovery/kbs.json";
 
-export { AUTHORABLE_MEDIA_TYPES, BRIDGED_CHANNELS, BUS_OPERATIONS, BusRequestError, CHANNEL_SCHEMAS, CONTEXT_FULL_WEIGHT, CONTEXT_PARTIAL_WEIGHT, ConfigurationError, ConflictError, DEFAULT_CHUNKING_CONFIG, DISCOVERY_URL_PATH, EMBEDDABLE_MEDIA_TYPES, EventBus, GENERATABLE_MEDIA_TYPES, JWTTokenSchema, LOCALES, MEDIA_TYPES, NotFoundError, PERSISTED_EVENT_TYPES, POSITION_WEIGHT_MAX, POSITION_WINDOW, RESOURCE_BROADCAST_TYPES, STARTUP_FETCH_RETRY, ScopedEventBus, ScriptError, SemiontError, UnauthorizedError, ValidationError, accessToken, agentToDid, anchorAnnotation, anchorRuns, annotationId, annotationUri, applyBodyOperations, assembleAnnotation, authCode, baseMediaType, baseUrl, buildContentCache, burstBuffer, busLog, busLogEnabled, busRequest, capabilitiesOf, chunkText, cloneFormat, cloneToken, createCircleSvg, createFragmentSelector, createPolygonSvg, createRectangleSvg, createTomlConfigLoader, decodeRepresentation, decodeWithCharset, deriveStorageUri, deriveViews, didToAgent, email, entityType, errField, estimateTokens, extensionForMediaType, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findBodyItem, findClaimSpan, folderOf, formatLocaleDisplay, generateUuid, getAllLocaleCodes, getAllPlatformTypes, getAnnotationExactText, getAnnotationUriFromEvent, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getFragmentSelector, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getNodeEncoding, getPageFromFragment, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getShardPath, getStorageUri, getSvgSelector, getTargetSelector, getTargetSource, getTextPositionSelector, getTextQuoteSelector, googleCredential, hasTargetSelector, isAnnotatable, isAnnotationId, isArchived, isArray, isAssessment, isBodyResolved, isBoolean, isComment, isDefined, isDraft, isEventRelatedToAnnotation, isFunction, isGatheredContext, isGenerationJobParams, isHighlight, isNull, isNullish, isNumber, isObject, isReference, isResolvedReference, isResourceId, isStoredEvent, isString, isStubReference, isSupportedMediaType, isTag, isTextRun, isTransientFetchError, isUndefined, isValidEmail, isValidPlatformType, jobId, jumpConsistentHash, kbDid, loadTomlConfig, locate, mcpToken, mediaTypeForExtension, normalizeCoordinates, normalizeText, parseEnvironment, parseFragmentSelector, parseSvgSelector, proposeStoragePath, reconcileSelector, refreshToken, resourceAnnotationUri, resourceId, resourceUri, retryWithBackoff, scaleSvgToNative, searchQuery, serializePerKey, setBusLogTraceIdProvider, softwareToAgent, storageFileName, textExtractionOf, textUnder, userDID, userId, userToAgent, userToDid, uuidV4, validateData, validateEnvironment, validateSvgMarkup, verifyPosition };
+export { AUTHORABLE_MEDIA_TYPES, BRIDGED_CHANNELS, BUS_OPERATIONS, BusRequestError, CHANNEL_SCHEMAS, CONTEXT_FULL_WEIGHT, CONTEXT_PARTIAL_WEIGHT, ConfigurationError, ConflictError, DEFAULT_CHUNKING_CONFIG, DISCOVERY_URL_PATH, EMBEDDABLE_MEDIA_TYPES, EventBus, GENERATABLE_MEDIA_TYPES, JWTTokenSchema, LOCALES, MEDIA_TYPES, NotFoundError, PERSISTED_EVENT_TYPES, POSITION_WEIGHT_MAX, POSITION_WINDOW, RESOURCE_BROADCAST_TYPES, STARTUP_FETCH_RETRY, ScopedEventBus, ScriptError, SemiontError, UnauthorizedError, ValidationError, accessToken, agentToDid, anchorAnnotation, anchorRuns, annotationId, annotationUri, applyBodyOperations, assembleAnnotation, authCode, baseMediaType, baseUrl, buildContentCache, burstBuffer, busLog, busLogEnabled, busRequest, capabilitiesOf, chunkText, cloneFormat, cloneToken, createCircleSvg, createFragmentSelector, createPolygonSvg, createRectangleSvg, createTomlConfigLoader, decodeRepresentation, decodeWithCharset, deriveStorageUri, deriveViews, didToAgent, email, entityType, errField, estimateTokens, extensionForMediaType, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findBodyItem, findClaimSpan, folderOf, formatLocaleDisplay, generateUuid, getAllLocaleCodes, getAllPlatformTypes, getAnnotationExactText, getAnnotationUriFromEvent, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getFragmentSelector, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getNodeEncoding, getPageFromFragment, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getShardPath, getStorageUri, getSvgSelector, getTargetSelector, getTargetSource, getTextPositionSelector, getTextQuoteSelector, googleCredential, hasTargetSelector, isAnnotatable, isAnnotationId, isArchived, isArray, isAssessment, isBodyResolved, isBoolean, isComment, isDefined, isDraft, isEventRelatedToAnnotation, isFunction, isGatheredContext, isGenerationJobParams, isHighlight, isNull, isNullish, isNumber, isObject, isReference, isResolvedReference, isResourceId, isStoredEvent, isString, isStubReference, isSupportedMediaType, isTag, isTextRun, isTransientFetchError, isUndefined, isValidEmail, isValidPlatformType, jobId, jumpConsistentHash, kbDid, loadTomlConfig, locate, mcpToken, mediaTypeForExtension, normalizeCoordinates, normalizeText, parseEnvironment, parseFragmentSelector, parseSvgSelector, proposeStoragePath, reconcileSelector, refreshToken, replyChannelsFor, resourceAnnotationUri, resourceId, resourceUri, retryWithBackoff, scaleSvgToNative, searchQuery, serializePerKey, setBusLogTraceIdProvider, softwareToAgent, storageFileName, textExtractionOf, textUnder, userDID, userId, userToAgent, userToDid, uuidV4, validateData, validateEnvironment, validateSvgMarkup, verifyPosition };
 export type { AccessToken, AnchorConfidence, AnchorMethod, AnchorRect, AnchorSelectors, AnchorStrategy, AnchoredText, AnchoringModel, Annotation, AnnotationCategory, AnnotationId, AnnotationUri, AnthropicProviderConfig, AppConfig, ArchivistServiceConfig, AssembledAnnotation, AuthCode, BaseUrl, BodyItem, BodyItemIdentity, BodyOperation, BoundingBox, Brand, BridgedChannel, BurstBufferOptions, BusOp, BusOperationKey, BusOperationSpec, BusRequestErrorCode, BusRequestPrimitive, ChunkingConfig, CloneToken, CollaboratorEntry, ConnectionState, ContentCache, ContentFormat, CreateAnnotationInternal, DatabaseServiceConfig, DiscoveredKB, DiscoveryDocument, Email, EmbeddingServiceConfig, EmittableChannel, EntityType, EntityTypeStats, Environment, EnvironmentConfig, EventBase, EventInput, EventMap, EventMetadata, EventName, EventOfType, EventQuery, EventSignature, ExtractionOutcome, FragmentSelector, GatewayServiceConfig, GatheredContext, GenerationJobParams, GoogleAuthRequest, GoogleCredential, GraphConnection, GraphDatabaseType, GraphPath, GraphServiceConfig, GraphViews, HealthCheckResponse, IContentTransport, IGatewayOperations, ITransport, InferenceProvidersConfig, JobId, JobType, ListUsersResponse, LlmSelectorInput, LocaleInfo, Logger, MCPToken, MatchQuality, McpServiceConfig, MediaTypeCapabilities, Motivation, OllamaProviderConfig, PdfCoordinate, PdfTextItem, PdfTextRun, PersistedEvent, PersistedEventType, PlatformType, Point, PutBinaryOptions, PutBinaryProgress, PutBinaryRequest, ReconciledSelector, RefreshToken, RenderMode, RenderedAnchor, ResourceAnnotationUri, ResourceAnnotations, ResourceBroadcastType, ResourceDescriptor, ResourceFilter, ResourceId, ResourceUri, RetryAttemptInfo, RetryPolicy, SearchQuery, SelectionData, Selector, SemiontConfig, ServicePlatformConfig, ServicesConfig, SiteConfig, StateUnit, StatusResponse, StoredEvent, StoredEventLike, SupportedMediaType, SvgSelector, TagCategory, TagSchema, TextExtraction, TextPosition, TextPositionSelector, TextQuoteSelector, ActorInferenceConfig as TomlActorInferenceConfig, TomlFileReader, InferenceConfig as TomlInferenceConfig, WorkerInferenceConfig as TomlWorkerInferenceConfig, TransportErrorCode, UpdateResourceInput, UpdateUserRequest, UpdateUserResponse, UserDID, UserId, UserResponse, ValidationFailure, ValidationResult, ValidationSuccess, VectorsServiceConfig, components, operations, paths };

package/dist/index.js

@@ -1,6 +1,6 @@
-export { createTomlConfigLoader, loadTomlConfig } from './chunk-VBMXNYPL.js';
-import { BUS_OPERATIONS } from './chunk-MM4HBHMM.js';
-export { BRIDGED_CHANNELS, BUS_OPERATIONS, EventBus, ScopedEventBus, accessToken, annotationUri, authCode, baseUrl, busLog, busLogEnabled, cloneToken, email, entityType, googleCredential, jobId, mcpToken, refreshToken, resourceAnnotationUri, resourceUri, searchQuery, setBusLogTraceIdProvider, userDID } from './chunk-MM4HBHMM.js';
+export { createTomlConfigLoader, loadTomlConfig } from './chunk-UGI6IOOX.js';
+import { BUS_OPERATIONS } from './chunk-EWOITHBH.js';
+export { BRIDGED_CHANNELS, BUS_OPERATIONS, EventBus, ScopedEventBus, accessToken, annotationUri, authCode, baseUrl, busLog, busLogEnabled, cloneToken, email, entityType, googleCredential, jobId, mcpToken, refreshToken, resourceAnnotationUri, resourceUri, searchQuery, setBusLogTraceIdProvider, userDID } from './chunk-EWOITHBH.js';
 import './chunk-YLJ4XMA6.js';
 import { Observable, merge, TimeoutError, throwError, firstValueFrom } from 'rxjs';
 import { filter, map, take, timeout, catchError, defaultIfEmpty } from 'rxjs/operators';
@@ -122,6 +122,9 @@ var CHANNEL_SCHEMAS = {
   "frame:add-tag-schema": "FrameAddTagSchemaCommand",
   "mark:create-ok": "MarkCreateOk",
   "mark:create-failed": "CommandError",
+  "mark:commit": "MarkCommitCommand",
+  "mark:commit-ok": "MarkCommitOk",
+  "mark:commit-failed": "CommandError",
   "mark:delete-ok": "MarkDeleteOk",
   "mark:delete-failed": "CommandError",
   "mark:archive-ok": null,
@@ -258,8 +261,10 @@ var CHANNEL_SCHEMAS = {
   "job:report-progress": "JobReportProgressCommand",
   "job:complete": "JobCompleteCommand",
   "job:fail": "JobFailCommand",
+  "job:checkpoint": "JobCheckpointCommand",
   "job:queued": "JobQueuedEvent",
   "job:cancel-requested": "JobCancelRequest",
+  "job:cancel": "JobCancelCommand",
   "job:status-requested": "JobStatusRequest",
   "job:create": "JobCreateCommand",
   "job:claim": "JobClaimCommand",
@@ -1008,10 +1013,32 @@ var BusRequestError = class extends SemiontError {
     this.name = "BusRequestError";
   }
 };
+function replyChannelsFor(channels) {
+  const out = /* @__PURE__ */ new Set();
+  for (const ch of channels) {
+    const op = BUS_OPERATIONS[ch];
+    if (!op) continue;
+    out.add(op.result);
+    out.add(op.failure);
+    if ("progress" in op && op.progress) out.add(op.progress);
+  }
+  return [...out];
+}
 async function busRequest(bus, operation, payload, timeoutMs = 3e4) {
   const correlationId = uuidV4();
   const fullPayload = { ...payload, correlationId };
   const { result: resultChannel, failure: failureChannel } = BUS_OPERATIONS[operation];
+  if (bus.isSubscribed) {
+    for (const replyChannel of [resultChannel, failureChannel]) {
+      if (!bus.isSubscribed(replyChannel)) {
+        throw new BusRequestError(
+          `Transport is not subscribed to reply channel ${replyChannel} \u2014 a reply to ${operation} can never arrive. Add this operation's reply channels to the transport's channel set.`,
+          "bus.unsubscribed",
+          { channel: operation, resultChannel, failureChannel }
+        );
+      }
+    }
+  }
   const result$ = merge(
     bus.stream(resultChannel).pipe(
       filter((e) => e.correlationId === correlationId),
@@ -2195,6 +2222,6 @@ function getShardPath(key, numBuckets = 65536) {
 // src/discovery.ts
 var DISCOVERY_URL_PATH = "/discovery/kbs.json";
 
-export { AUTHORABLE_MEDIA_TYPES, BusRequestError, CHANNEL_SCHEMAS, CONTEXT_FULL_WEIGHT, CONTEXT_PARTIAL_WEIGHT, ConfigurationError, ConflictError, DEFAULT_CHUNKING_CONFIG, DISCOVERY_URL_PATH, EMBEDDABLE_MEDIA_TYPES, GENERATABLE_MEDIA_TYPES, JWTTokenSchema, LOCALES, MEDIA_TYPES, NotFoundError, PERSISTED_EVENT_TYPES, POSITION_WEIGHT_MAX, POSITION_WINDOW, RESOURCE_BROADCAST_TYPES, STARTUP_FETCH_RETRY, ScriptError, SemiontError, UnauthorizedError, ValidationError, agentToDid, anchorAnnotation, anchorRuns, annotationId, applyBodyOperations, assembleAnnotation, baseMediaType, buildContentCache, burstBuffer, busRequest, capabilitiesOf, chunkText, cloneFormat, createCircleSvg, createFragmentSelector, createPolygonSvg, createRectangleSvg, decodeRepresentation, decodeWithCharset, deriveStorageUri, deriveViews, didToAgent, errField, estimateTokens, extensionForMediaType, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findBodyItem, findClaimSpan, folderOf, formatLocaleDisplay, generateUuid, getAllLocaleCodes, getAllPlatformTypes, getAnnotationExactText, getAnnotationUriFromEvent, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getFragmentSelector, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getNodeEncoding, getPageFromFragment, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getShardPath, getStorageUri, getSvgSelector, getTargetSelector, getTargetSource, getTextPositionSelector, getTextQuoteSelector, hasTargetSelector, isAnnotatable, isAnnotationId, isArchived, isArray, isAssessment, isBodyResolved, isBoolean, isComment, isDefined, isDraft, isEventRelatedToAnnotation, isFunction, isGatheredContext, isGenerationJobParams, isHighlight, isNull, isNullish, isNumber, isObject, isReference, isResolvedReference, isResourceId, isStoredEvent, isString, isStubReference, isSupportedMediaType, isTag, isTextRun, isTransientFetchError, isUndefined, isValidEmail, isValidPlatformType, jumpConsistentHash, kbDid, locate, mediaTypeForExtension, normalizeCoordinates, normalizeText, parseEnvironment, parseFragmentSelector, parseSvgSelector, proposeStoragePath, reconcileSelector, resourceId, retryWithBackoff, scaleSvgToNative, serializePerKey, softwareToAgent, storageFileName, textExtractionOf, textUnder, userId, userToAgent, userToDid, uuidV4, validateData, validateEnvironment, validateSvgMarkup, verifyPosition };
+export { AUTHORABLE_MEDIA_TYPES, BusRequestError, CHANNEL_SCHEMAS, CONTEXT_FULL_WEIGHT, CONTEXT_PARTIAL_WEIGHT, ConfigurationError, ConflictError, DEFAULT_CHUNKING_CONFIG, DISCOVERY_URL_PATH, EMBEDDABLE_MEDIA_TYPES, GENERATABLE_MEDIA_TYPES, JWTTokenSchema, LOCALES, MEDIA_TYPES, NotFoundError, PERSISTED_EVENT_TYPES, POSITION_WEIGHT_MAX, POSITION_WINDOW, RESOURCE_BROADCAST_TYPES, STARTUP_FETCH_RETRY, ScriptError, SemiontError, UnauthorizedError, ValidationError, agentToDid, anchorAnnotation, anchorRuns, annotationId, applyBodyOperations, assembleAnnotation, baseMediaType, buildContentCache, burstBuffer, busRequest, capabilitiesOf, chunkText, cloneFormat, createCircleSvg, createFragmentSelector, createPolygonSvg, createRectangleSvg, decodeRepresentation, decodeWithCharset, deriveStorageUri, deriveViews, didToAgent, errField, estimateTokens, extensionForMediaType, extractBoundingBox, extractCharset, extractContext, findBestTextMatch, findBodyItem, findClaimSpan, folderOf, formatLocaleDisplay, generateUuid, getAllLocaleCodes, getAllPlatformTypes, getAnnotationExactText, getAnnotationUriFromEvent, getBodySource, getBodyType, getChecksum, getCommentText, getCreator, getDerivedFrom, getExactText, getFragmentSelector, getLanguage, getLocaleEnglishName, getLocaleInfo, getLocaleNativeName, getNodeEncoding, getPageFromFragment, getPrimaryMediaType, getPrimaryRepresentation, getPrimarySelector, getResourceEntityTypes, getResourceId, getShardPath, getStorageUri, getSvgSelector, getTargetSelector, getTargetSource, getTextPositionSelector, getTextQuoteSelector, hasTargetSelector, isAnnotatable, isAnnotationId, isArchived, isArray, isAssessment, isBodyResolved, isBoolean, isComment, isDefined, isDraft, isEventRelatedToAnnotation, isFunction, isGatheredContext, isGenerationJobParams, isHighlight, isNull, isNullish, isNumber, isObject, isReference, isResolvedReference, isResourceId, isStoredEvent, isString, isStubReference, isSupportedMediaType, isTag, isTextRun, isTransientFetchError, isUndefined, isValidEmail, isValidPlatformType, jumpConsistentHash, kbDid, locate, mediaTypeForExtension, normalizeCoordinates, normalizeText, parseEnvironment, parseFragmentSelector, parseSvgSelector, proposeStoragePath, reconcileSelector, replyChannelsFor, resourceId, retryWithBackoff, scaleSvgToNative, serializePerKey, softwareToAgent, storageFileName, textExtractionOf, textUnder, userId, userToAgent, userToDid, uuidV4, validateData, validateEnvironment, validateSvgMarkup, verifyPosition };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map